Lucene search

K
oraclelinuxOracleLinuxELSA-2023-7879
HistoryDec 19, 2023 - 12:00 a.m.

opensc security update

2023-12-1900:00:00
linux.oracle.com
9
opensc
security update
file caching
cve-2023-40660
cve-2023-40661
cve-2023-4535
cve-2023-5992
unix
symmetric keys
encryption
myeid driver

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.4%

[0.23.0-3]

  • Fix file caching with different offsets (RHEL-4079)
  • Fix CVE-2023-40660: Potential PIN bypass
  • Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  • Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  • Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding